Emails that have the "envelope from" is empty need to be blocked.
Email Security.cloud
There is no way to block messages that the envelop sender is blank. However, If you need to address impersonation messages/scams, the sender authentication would help. Also, for preventing domain-based email spoofing, the following document would be useful.
178783: Prevent domain-based email spoofing with Email Security.cloud